Secure web hosting structure

Good day readers,
I’m new at TR but not in this world. I have been working on some project for the last past few years to develop a super management tool that would be available throughout the web. This is my main goal. But for now it resides on anintranet, so the architecture and access control is still simple. What I?m missing as knowledge and experience is to know what are the H’s about offering real web services over W3. Everywhere I look I don’t feel confident about what I?m reading and so if any of you would like to share some knowledge, references, documents, …
It would be great.
I live in St-Jerome, witch is north of Montreal (Quebec, Canada) and what was at one time a project, becomes world wide known.